Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.mft
File:                     9F6A40DC353716AE0302F76B938D0911F63E3B06.mft (raw, json)
Hash identifier:          qqbT1ZfIbbDaOCuTHlNpDCKT7k5LAZDOpeORjpS7vnw=
Subject key identifier:   8C:7E:0B:47:3B:98:2C:16:89:F7:C2:A7:0F:CF:6B:4F:07:E3:8C:C2
Authority key identifier: 9F:6A:40:DC:35:37:16:AE:03:02:F7:6B:93:8D:09:11:F6:3E:3B:06
Certificate issuer:       /CN=9F6A40DC353716AE0302F76B938D0911F63E3B06
Certificate serial:       5944CA1DA6177A7D9222768F8E61DDA1EFA910FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.mft
Manifest number:          020B
Signing time:             Mon 15 Apr 2024 01:49:04 +0000
Manifest this update:     Mon 15 Apr 2024 01:44:04 +0000
Manifest next update:     Tue 16 Apr 2024 05:12:04 +0000
Files and hashes:         1: 3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa (hash: VWgAymqp4t5AlYmcssPFLTZXGKa+/Viyr3c8cRRu0l0=)
                          2: 323830343a373937303a3a2f33322d3438203d3e20323731333035.roa (hash: npHIDmgPpNB9GT8tb5cHB8W0OmhX2VX1QYf9MF0C7H8=)
                          3: 9F6A40DC353716AE0302F76B938D0911F63E3B06.crl (hash: znsDvvWONsBWQddjtWxDyKQXD/xdghXHiQgJN3iCE5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:44:ca:1d:a6:17:7a:7d:92:22:76:8f:8e:61:dd:a1:ef:a9:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6A40DC353716AE0302F76B938D0911F63E3B06
        Validity
            Not Before: Apr 15 01:44:04 2024 GMT
            Not After : Apr 16 05:12:04 2024 GMT
        Subject: CN=8C7E0B473B982C1689F7C2A70FCF6B4F07E38CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:ed:6f:da:2b:f8:a2:ef:b6:7e:bd:2a:1e:
                    77:e2:71:c9:23:84:32:1b:f2:79:2b:a6:e2:66:93:
                    19:1d:8c:0b:21:78:5f:8f:de:13:8f:4f:7e:86:c7:
                    31:78:53:95:75:80:fb:21:21:bb:74:c5:05:da:62:
                    ac:75:49:23:6e:16:1d:89:6a:31:d2:3c:97:0d:d4:
                    e9:a0:3a:dc:fe:05:cb:d8:8b:96:7d:74:50:1e:57:
                    0a:c0:7b:fa:23:4f:c2:63:ed:83:b0:d0:36:73:80:
                    04:41:8b:58:e6:99:17:50:78:f0:6c:cc:ab:44:21:
                    68:5c:96:50:84:bd:1f:08:c9:1c:d1:8d:3a:64:10:
                    93:ff:96:7d:58:56:92:38:ba:67:51:16:b8:46:1d:
                    f0:d7:38:2f:bd:d8:e0:63:fc:b0:b6:e1:da:19:69:
                    8e:b6:fe:d2:9c:cc:06:2b:a1:c5:ff:15:35:f0:0f:
                    50:94:5a:4d:18:0c:e7:33:b7:91:c0:90:64:ad:b4:
                    82:8f:34:70:7d:e2:a9:0e:67:96:dd:08:d4:7a:86:
                    fb:b5:04:bb:a2:01:67:d7:18:2d:e1:71:c0:92:c7:
                    c1:2f:78:2c:09:7c:b7:ba:82:9c:0a:46:ac:26:8f:
                    cc:93:53:03:8c:ab:d4:4e:52:e9:9d:5a:1d:29:f7:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:0B:47:3B:98:2C:16:89:F7:C2:A7:0F:CF:6B:4F:07:E3:8C:C2
            X509v3 Authority Key Identifier:
                keyid:9F:6A:40:DC:35:37:16:AE:03:02:F7:6B:93:8D:09:11:F6:3E:3B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:94:a9:43:c8:db:6f:26:da:a8:ea:0d:e1:61:01:6b:25:
         9e:57:9a:7f:37:70:c9:8d:da:99:04:66:ca:d4:05:31:18:84:
         00:6f:1e:d9:69:81:ed:2d:87:ca:67:8e:8c:66:c1:70:17:d6:
         30:c5:97:11:fd:d3:63:00:a4:03:84:ec:f4:f4:6e:45:20:33:
         2a:79:d6:24:bd:63:16:24:71:af:1a:44:55:8f:d5:ac:62:d6:
         f5:97:7c:11:3d:a5:7d:f1:08:ed:e0:51:71:2f:c7:f3:7a:5f:
         07:10:ee:68:fc:8b:f4:99:d6:8a:5d:3f:fc:3b:71:22:bb:13:
         2e:49:d4:bb:5d:4f:80:3a:00:e1:0a:7a:73:88:40:b5:60:18:
         f5:d4:f1:a4:c0:f8:31:aa:2b:59:98:53:fa:83:14:31:4c:1b:
         51:a1:08:c2:3f:3b:3d:08:01:30:5e:01:69:2c:c3:ab:dd:31:
         4e:ac:be:bd:3d:58:76:3a:cd:47:40:f8:0a:10:c0:3b:dd:cc:
         81:b2:9b:90:00:90:66:df:85:70:db:d7:8e:54:f4:39:a2:a6:
         bd:cd:d0:fa:b8:6f:bf:a6:49:0c:e6:ec:1a:f0:31:d1:3e:38:
         65:2d:44:d2:a3:9b:33:3d:e8:a3:fd:c7:50:3f:93:ef:52:48:
         d1:d1:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----